Open source software packages cannot be blindly trusted to deliver on security June 25, 2019 https://portswigger.net/daily-swig/velocity-does-not-have-to-come-at-the-cost-of-security